Skip to content

Security: DanMat/CSS3-Calculator

Security

SECURITY.md

Security Policy

Supported versions

This is a small, static, client-side project with no backend and no data collection. The latest version on the master branch is the only supported version.

Reporting a vulnerability

If you discover a security issue (for example a cross-site scripting vector in how input or history is rendered), please report it privately rather than opening a public issue.

Please include:

  • A description of the issue and its potential impact.
  • Steps to reproduce (a minimal example or affected input).
  • The browser and version where you observed it.

You can expect an initial response within 7 days. Once the issue is confirmed and fixed, credit will be given in the release notes unless you prefer to remain anonymous.

Scope

Because the calculator runs entirely in the browser with no dependencies and no network calls, the most relevant concerns are DOM-based issues (e.g. unsafe HTML rendering). Reports in that area are especially appreciated.

There aren't any published security advisories